{"_id":"@akeyless-community/claude-connector","_rev":"3-548c1c776d2c68b1b2d84d899b9b54d1","name":"@akeyless-community/claude-connector","dist-tags":{"latest":"0.3.1"},"versions":{"0.2.5":{"name":"@akeyless-community/claude-connector","version":"0.2.5","keywords":["akeyless","claude","anthropic","mcp","mcpb","agentic-runtime-authority","secrets","connector"],"author":{"name":"Akeyless Community"},"license":"Apache-2.0","_id":"@akeyless-community/claude-connector@0.2.5","maintainers":[{"name":"barak-akeyless","email":"barak.a@akeyless.io"}],"homepage":"https://github.com/akeyless-community/claude-akeyless-connector#readme","bugs":{"url":"https://github.com/akeyless-community/claude-akeyless-connector/issues"},"bin":{"claude-connector":"dist/index.js","akeyless-claude-mcp":"dist/index.js"},"dist":{"shasum":"cce2d17feb423c046700db03d683df3588d9c314","tarball":"https://registry.npmjs.org/@akeyless-community/claude-connector/-/claude-connector-0.2.5.tgz","fileCount":45,"integrity":"sha512-YVDLp2LoxZV66JX1Vf8UqdCD3493BHKLrAdBxI8fnXG1W33P87QISE7y1HBuTQ94uPeQwD3fkXgwiQFP+V1eOQ==","signatures":[{"sig":"MEQCIEWafKm5fpvjK5HjCD4DuSL/yvrNF/v+U7AsfJbG7P8+AiBKVoWXgO2nwdT856WT9lw+7PPt7kO8OHPSUBIWx2GKfA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":145113},"main":"./dist/index.js","types":"./dist/index.d.ts","engines":{"node":">=18"},"gitHead":"4b56003cb29a7edcbb8c66554e3a5289a23b2bdd","scripts":{"dev":"tsc -p tsconfig.json --watch","test":"jest","build":"tsc -p tsconfig.json && chmod +x dist/index.js","start":"node dist/index.js","pack:mcpb":"npm run build && mcpb pack && node scripts/verify-pack.js","prepublishOnly":"npm run build && npm test"},"_npmUser":{"name":"barak-akeyless","email":"barak.a@akeyless.io"},"repository":{"url":"git+https://github.com/akeyless-community/claude-akeyless-connector.git","type":"git"},"_npmVersion":"11.16.0","description":"Akeyless Agentic Runtime Authority MCP connector for Claude Desktop — SDK-based, no CLI required","directories":{},"_nodeVersion":"26.3.0","dependencies":{"zod":"^3.23.8","akeyless":"^5.0.26","akeyless-cloud-id":"^1.0.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","ts-jest":"^29.2.5","typescript":"^5.7.2","@types/jest":"^29.5.14","@types/node":"^20.17.0"},"_npmOperationalInternal":{"tmp":"tmp/claude-connector_0.2.5_1783242956717_0.27914499979502505","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@akeyless-community/claude-connector","version":"0.3.0","keywords":["akeyless","claude","anthropic","mcp","mcpb","agentic-runtime-authority","secrets","connector"],"author":{"name":"Akeyless Community"},"license":"MIT","_id":"@akeyless-community/claude-connector@0.3.0","maintainers":[{"name":"barak-akeyless","email":"barak.a@akeyless.io"}],"homepage":"https://github.com/akeyless-community/claude-akeyless-connector#readme","bugs":{"url":"https://github.com/akeyless-community/claude-akeyless-connector/issues"},"bin":{"claude-connector":"dist/index.js","akeyless-claude-mcp":"dist/index.js"},"dist":{"shasum":"423b00051b897e994df39cb0852673c350496f76","tarball":"https://registry.npmjs.org/@akeyless-community/claude-connector/-/claude-connector-0.3.0.tgz","fileCount":45,"integrity":"sha512-C6jCnWsMyBIcPcUsfod7sNH5pSQdX1ShmGbOxAW0DP9GPpPnScAnT5Uflt0/ev4IxAurK03KGIn9uuIMTslTcw==","signatures":[{"sig":"MEQCIG0gjtOufhKzhyASj9qiC/lq93Srd7w9THtmUZySkrSqAiB6XDGlfjwiqM8j4ByQHyZUkTA1oDjPNeq/J52rP7HxHA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":155689},"main":"./dist/index.js","types":"./dist/index.d.ts","engines":{"node":">=18"},"gitHead":"029561abfbbceff53bac27952bde0b7fd2ee312d","scripts":{"dev":"tsc -p tsconfig.json --watch","test":"jest","build":"tsc -p tsconfig.json && chmod +x dist/index.js","start":"node dist/index.js","pack:mcpb":"npm run build && mcpb pack && node scripts/verify-pack.js","prepublishOnly":"npm run build && npm test"},"_npmUser":{"name":"barak-akeyless","email":"barak.a@akeyless.io"},"repository":{"url":"git+https://github.com/akeyless-community/claude-akeyless-connector.git","type":"git"},"_npmVersion":"10.8.2","description":"Akeyless Agentic Runtime Authority MCP connector for Claude Desktop — SDK-based, no CLI required","directories":{},"_nodeVersion":"20.20.2","dependencies":{"zod":"^3.23.8","akeyless":"^5.0.26","akeyless-cloud-id":"^1.0.0","@modelcontextprotocol/sdk":"^1.29.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","ts-jest":"^29.2.5","typescript":"^5.7.2","@types/jest":"^29.5.14","@types/node":"^20.17.0"},"_npmOperationalInternal":{"tmp":"tmp/claude-connector_0.3.0_1783254187195_0.07195511640348995","host":"s3://npm-registry-packages-npm-production"}},"0.3.1":{"name":"@akeyless-community/claude-connector","version":"0.3.1","description":"Akeyless Agentic Runtime Authority MCP connector for Claude Desktop — SDK-based, no CLI required","license":"MIT","author":{"name":"Akeyless Community"},"repository":{"type":"git","url":"git+https://github.com/akeyless-community/claude-akeyless-connector.git"},"homepage":"https://github.com/akeyless-community/claude-akeyless-connector#readme","keywords":["akeyless","claude","anthropic","mcp","mcpb","agentic-runtime-authority","secrets","connector"],"engines":{"node":">=18"},"bin":{"akeyless-claude-mcp":"dist/index.js","claude-connector":"dist/index.js"},"main":"./dist/index.js","types":"./dist/index.d.ts","scripts":{"build":"tsc -p tsconfig.json && chmod +x dist/index.js","start":"node dist/index.js","dev":"tsc -p tsconfig.json --watch","test":"jest","pack:mcpb":"npm run build && mcpb pack && node scripts/verify-pack.js","prepublishOnly":"npm run build && npm test"},"publishConfig":{"access":"public"},"dependencies":{"@modelcontextprotocol/sdk":"^1.29.0","akeyless":"^5.0.26","akeyless-cloud-id":"^1.0.0","zod":"^3.23.8"},"devDependencies":{"@types/jest":"^29.5.14","@types/node":"^20.17.0","jest":"^29.7.0","ts-jest":"^29.2.5","typescript":"^5.7.2"},"_id":"@akeyless-community/claude-connector@0.3.1","gitHead":"4340731dc98c676adf602cdf24e916afc9631123","bugs":{"url":"https://github.com/akeyless-community/claude-akeyless-connector/issues"},"_nodeVersion":"20.20.2","_npmVersion":"10.8.2","dist":{"integrity":"sha512-R18c4KnNiSTpHRd92QcF+bAfMFrEmJOtan2pkJyMNPUmvQaeOy/Aduk8909iWUE8JWUs96/6vRBuOxwisLasUQ==","shasum":"d951bc2c5fd8c03eb4e077868a3eee865b0ba801","tarball":"https://registry.npmjs.org/@akeyless-community/claude-connector/-/claude-connector-0.3.1.tgz","fileCount":45,"unpackedSize":156077,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIAdmR5VfwI5fKI3RaT71HYDJvMX97pvIFFudK9MVrwO4AiBQ+FrgGfNnnneHXsvpEsSPympBsuJ4HTF0P4vJk8Pf9g=="}]},"_npmUser":{"name":"barak-akeyless","email":"barak.a@akeyless.io"},"directories":{},"maintainers":[{"name":"barak-akeyless","email":"barak.a@akeyless.io"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/claude-connector_0.3.1_1785323012645_0.3594223255620297"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-05T09:15:56.461Z","modified":"2026-07-29T11:03:33.028Z","0.2.5":"2026-07-05T09:15:56.857Z","0.3.0":"2026-07-05T12:23:07.372Z","0.3.1":"2026-07-29T11:03:32.849Z"},"bugs":{"url":"https://github.com/akeyless-community/claude-akeyless-connector/issues"},"author":{"name":"Akeyless Community"},"license":"MIT","homepage":"https://github.com/akeyless-community/claude-akeyless-connector#readme","keywords":["akeyless","claude","anthropic","mcp","mcpb","agentic-runtime-authority","secrets","connector"],"repository":{"type":"git","url":"git+https://github.com/akeyless-community/claude-akeyless-connector.git"},"description":"Akeyless Agentic Runtime Authority MCP connector for Claude Desktop — SDK-based, no CLI required","maintainers":[{"name":"barak-akeyless","email":"barak.a@akeyless.io"}],"readme":"# Akeyless Connector for Claude Desktop\n\nAn SDK-based MCP connector that brings [Akeyless Agentic Runtime Authority (ARA)](https://docs.akeyless.io/docs/agentic-runtime-authority) to [Claude Desktop](https://claude.com/download) — without installing the Akeyless CLI.\n\nClaude orchestrates. Akeyless holds the credentials. **Secret values never enter the model context.**\n\n## Install\n\n### npm / npx (manual Claude Desktop config)\n\nPublished on npm as [`@akeyless-community/claude-connector`](https://www.npmjs.com/package/@akeyless-community/claude-connector):\n\n```bash\nnpm install -g @akeyless-community/claude-connector\n```\n\nOr use `npx` without a global install — see [Manual MCP configuration](#manual-mcp-configuration-without-mcpb) below.\n\n### Claude Desktop extension (`.mcpb`)\n\nDownload the latest `.mcpb` from [GitHub Releases](https://github.com/akeyless-community/claude-akeyless-connector/releases) and double-click to install.\n\nOr build locally: `npm run pack:mcpb` → `claude-akeyless-connector.mcpb`\n\n## How to use it (after install)\n\nOnce the extension is installed and configured:\n\n1. **Open Claude Desktop** and start a new chat.\n2. **Check the connector is active** — go to **Settings → Connectors** (or the connector/tools panel) and confirm **Akeyless Agentic Runtime Authority** is enabled.\n3. **Ask Claude in natural language.** Claude calls the connector tools automatically — you do not run CLI commands yourself.\n\nExample prompts:\n\n> \"List my Akeyless ARA secrets.\"\n\n> \"Run `SELECT count(*) FROM customers` against `/prod/db/postgres-readonly`.\"\n\n> \"Use service-execute on `/prod/aws/devops` to list S3 buckets.\"\n\n### What happens under the hood\n\n| Step | Tool | What you see |\n|---|---|---|\n| 1 | `list-secrets` | Secret paths and target types (no credentials) |\n| 2 | `query-db` or `service-execute` | Query/action results only |\n| 3 | ARA audit | Session recorded in Akeyless with your Agent ID |\n\nClaude may ask you to **approve** tool calls before they run — that is expected for infrastructure access.\n\n### First-time SAML/OIDC login\n\nIf you configured **saml** or **oidc** as the authentication method, the **first tool call** opens your browser for login. Complete the IdP sign-in, then return to Claude — subsequent calls reuse the cached session until it expires.\n\n### Universal Identity\n\nSet **Authentication Method** to `universal_identity` and point **UID Token File** at the auto-rotated token path (default: `~/.akeyless/uid_rotator/uid-token`). The connector re-reads the file whenever it refreshes authentication.\n\n## Why this exists\n\nToday, connecting Claude to Akeyless ARA requires configuring the MCP server to run `akeyless mcp-runtime-authority` with a CLI profile. That works, but it means every user must install and maintain the Akeyless CLI.\n\nThis connector uses the official **Akeyless Node.js SDK** (`akeyless` npm package) and ships as a **Claude Desktop Extension (`.mcpb`)** with a built-in settings UI for Gateway URL, Access ID, Access Key, and other auth options.\n\n## Architecture\n\n```mermaid\nsequenceDiagram\n    participant User as User\n    participant Claude as Claude Desktop\n    participant MCP as akeyless-claude-mcp\n    participant API as Akeyless API\n    participant GW as Akeyless Gateway\n    participant Target as Database / Cloud\n\n    User->>Claude: \"Query prod postgres for user count\"\n    Claude->>MCP: list-secrets\n    MCP->>API: list-items via gw:8000/api/v2\n    API-->>MCP: secret paths + target types\n    MCP-->>Claude: /prod/db/postgres-ro\n    Claude->>MCP: query-db\n    MCP->>GW: POST gw:8000/config/target_query\n    GW->>Target: execute with JIT credentials\n    Target-->>GW: query results\n    GW-->>MCP: JSON results (no credentials)\n    MCP-->>Claude: { count: 42 }\n```\n\n## MCP tools\n\n| Tool | Purpose |\n|---|---|\n| `list-secrets` | List ARA-enabled dynamic, rotated, and custom-MCP secrets your role can access |\n| `query-db` | Run database queries (MySQL, PostgreSQL, MongoDB, Redis, etc.) |\n| `service-execute` | Run AWS, GCP, Azure, Kubernetes, GitHub, or custom MCP actions |\n| `list-sub-tools` | Optional: discover a service secret's sub-tool names/parameters before calling `service-execute` |\n\nThese match the tools exposed by `akeyless mcp-runtime-authority`, but run through the SDK instead of the CLI.\n\n## Install for Claude Desktop (recommended)\n\n### 1. Build the extension bundle\n\n```bash\ncd claude-akeyless-connector\nnpm install\nnpm run pack:mcpb\n```\n\nThis produces `claude-akeyless-connector.mcpb`.\n\n### 2. Install in Claude Desktop\n\n1. Double-click the `.mcpb` file, **or**\n2. Drag it into the Claude Desktop window, **or**\n3. **Settings → Extensions → Advanced settings → Install Extension…**\n\nClaude Desktop shows one configuration form. Set **Authentication Method**, then fill in only the fields that apply:\n\n| Field | When to fill it |\n|---|---|\n| **Gateway URL** | Always — e.g. `https://gw.example.com:8000/api/v2` |\n| **Authentication Method** | Always — see table in extension description |\n| **Access ID** | `access_key`, `saml`, `oidc`, `jwt`, cloud IAM |\n| **Access Key** | `access_key` only |\n| **UID Token File** | `universal_identity` only |\n| **JWT** | `jwt` only |\n| **Agent ID** | Always (default `claude-desktop`) |\n\n> MCPB 0.3 does not yet support dropdowns or hiding fields by auth method ([open request](https://github.com/modelcontextprotocol/mcpb/issues/165)). All fields are shown, but you only need the ones for your chosen method.\n\nSensitive values are stored in the OS keychain.\n\nSee [Claude MCPB documentation](https://claude.com/docs/connectors/building/mcpb).\n\n## Manual MCP configuration (without .mcpb)\n\nAdd to `~/Library/Application Support/Claude/claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"akeyless\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@akeyless-community/claude-connector\"],\n      \"env\": {\n        \"AKEYLESS_GATEWAY_URL\": \"https://your-gateway.example.com:8000/api/v2\",\n        \"AKEYLESS_ACCESS_ID\": \"p-xxxxx\",\n        \"AKEYLESS_ACCESS_KEY\": \"your-access-key\",\n        \"AKEYLESS_AGENT_ID\": \"claude-desktop\"\n      }\n    }\n  }\n}\n```\n\nOr run locally after building:\n\n```json\n{\n  \"mcpServers\": {\n    \"akeyless\": {\n      \"command\": \"node\",\n      \"args\": [\"/path/to/claude-akeyless-connector/dist/index.js\"],\n      \"env\": {\n        \"AKEYLESS_GATEWAY_URL\": \"https://your-gateway.example.com:8000/api/v2\",\n        \"AKEYLESS_ACCESS_ID\": \"p-xxxxx\",\n        \"AKEYLESS_ACCESS_KEY\": \"your-access-key\"\n      }\n    }\n  }\n}\n```\n\n## Prerequisites\n\n- Akeyless Gateway with [Agentic Runtime Authority enabled](https://docs.akeyless.io/docs/agentic-runtime-authority)\n- A role with ARA **Allow Access** on the relevant secret paths\n- An authentication method associated with that role\n- Claude Desktop >= 1.0.0\n\n## Example prompts\n\n> \"List my Akeyless ARA secrets and run `SELECT count(*) FROM customers` against the postgres read-only dynamic secret.\"\n\n> \"Use service-execute on `/prod/aws/devops` to list all S3 buckets.\"\n\n> \"What database secrets do I have access to?\"\n\n## Security model\n\n- **Secretless by design** — credentials are resolved and used by the Gateway; only query/action results are returned\n- **RBAC-scoped** — only secrets with `ara_allow_access` permission are listed and executable\n- **Audited** — every execution is recorded as an ARA session (agent ID + MCP ID)\n- **Input/output rules** — ARA policies on dynamic secrets constrain what agents can send and receive\n\n**Recommendations:**\n- Scope roles to least-privilege secret paths\n- Use dynamic secrets over static credentials where possible\n- Set meaningful Agent IDs per user or workstation\n\n## Troubleshooting\n\n### Server disconnects right after `initialize`\n\nClaude logs like `Server transport closed unexpectedly` usually mean the Node process crashed on startup. A common cause was a broken `.mcpb` bundle where `.mcpbignore` accidentally excluded every `src/` folder — including `node_modules/debug/src`.\n\n**Fix:** Reinstall **v0.1.1+** (rebuilt with `/src` scoped ignore + pack verification):\n\n```bash\nnpm run pack:mcpb\n```\n\nDouble-click the new `claude-akeyless-connector.mcpb`.\n\n### Extension enabled but Claude doesn't use it\n\n- Use **regular Chat**, not Local Agent / Cowork mode\n- Confirm the extension toggle is **ON** in Settings → Extensions\n- Start a **new chat** after enabling\n- Ask explicitly: \"Use the Akeyless list-secrets tool\"\n\n## Development\n\nUses the [`akeyless`](https://www.npmjs.com/package/akeyless) npm package. On startup the connector logs both its own version and the bundled SDK version (also visible in MCP server metadata and tool instructions).\n\n```bash\ncd claude-akeyless-connector\nnpm install\nnpm run build\nnpm test\n```\n\nRun locally:\n\n```bash\nexport AKEYLESS_ACCESS_ID=...\nexport AKEYLESS_ACCESS_KEY=...\nexport AKEYLESS_GATEWAY_URL=https://your-gateway:8000/api/v2\nnpm start\n```\n\n## Comparison with CLI-based setup\n\n| | CLI (`mcp-runtime-authority`) | This connector |\n|---|---|---|\n| Runtime | Akeyless CLI binary | Node.js + `akeyless` SDK |\n| Auth | CLI profile (`--profile`) | Env vars / Claude Desktop UI |\n| Gateway config | `--gateway-url` (ARA port) | Single `AKEYLESS_GATEWAY_URL` (derives `/api/v2` + config port) |\n| Install | Install CLI + configure profile | One-click `.mcpb` or `npx` |\n| Tools | list-secrets, query-db, service-execute, list-sub-tools | Same four tools |\n\n## Related projects\n\n- [`codex-akeyless-integration`](../codex-akeyless-integration) — SDK-based MCP for OpenAI Codex (includes env injection tools)\n- [`akeyless mcp-runtime-authority`](../akeyless-main-repo/go/src/client/commands/mcp_runtime_authority.go) — CLI-based ARA MCP server\n\n## License\n\nMIT — see [LICENSE](LICENSE).\n\n## Privacy Policy\n\nThis connector runs **locally on your machine** as a Claude Desktop extension or stdio MCP server. It does not send conversation content to Akeyless.\n\n**What the connector accesses**\n\n- Your configured **Akeyless Gateway** for authentication, secret listing, and ARA execution\n- Local files only when you configure Universal Identity (`uid_token_file`)\n\n**What is not collected by this open-source package**\n\n- No telemetry or analytics are built into the connector\n- Credentials you enter in Claude Desktop settings are stored in the OS keychain by Claude, not in this repository\n\n**Third-party services**\n\n- [Akeyless](https://www.akeyless.io/privacy-policy/) — your Gateway and tenant are operated by you or Akeyless per your deployment\n- [Anthropic / Claude Desktop](https://www.anthropic.com/privacy) — hosts the MCP client; tool inputs/outputs follow Claude’s policies\n\n**Data retention**\n\n- ARA session audit logs are retained per your Akeyless Gateway and Console settings\n- The connector holds auth tokens in memory only for the running process\n\n**Contact**\n\n- Issues: [github.com/akeyless-community/claude-akeyless-connector/issues](https://github.com/akeyless-community/claude-akeyless-connector/issues)\n- Akeyless: [akeyless.io](https://www.akeyless.io)\n\n## Publishing & directory submission\n\n- [docs/PUBLISHING.md](docs/PUBLISHING.md) — npm release process\n- [docs/SUBMISSION.md](docs/SUBMISSION.md) — Connectors Directory submission pack\n- [docs/DIRECTORY_AND_REMOTE.md](docs/DIRECTORY_AND_REMOTE.md) — remote MCP variant architecture\n","readmeFilename":"README.md"}